Industry 4.0 connects machines – and widens the attack surface. This radar counts new security advisories (ICS-CERT) for the automation vendors that run German factories: Siemens, Phoenix Contact, WAGO, Beckhoff, SICK, Schneider, Rockwell, ABB and more.
Siemens Building Automation and Energy Products
Distribution of all tracked advisories by CVSS severity.
New advisories per month for the tracked vendors – rolling window; the red peak marks the busiest month.
Which automation vendors account for the most advisories. “DE” = headquartered in Germany.
More advisories doesn't mean “less secure” – large, widely deployed portfolios (e.g. Siemens) simply generate more reports.
The latest ICS-CERT advisories for the tracked vendors.
Siemens Building Automation and Energy Products
Siemens Desigo, Gridscale
Siemens Industrial Edge Management
Siemens RUGGEDCOM APE1808
Siemens RUGGEDCOM APE1808
Siemens Mendix SAML Module
Hitachi Energy TRO600 series products
Hitachi Energy CoreTec Product
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
Siemens Industrial Edge App Publisher
Siemens Software Center
Siemens Capital Embedded AR Classic
Siemens SENTRON 3NA COM Fuse
Siemens PSS(R)SINCAL
Siemens SIMATIC IPCs
Siemens APOGEE, TALON and Desigo PXC/PXM Products
Siemens Industrial Edge Device Kit
Siemens SIMATIC S7 Webserver API
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Siemens RUGGEDCOM CROSSBOW
Siemens WinCC
Siemens SIMATIC S7 PLCs Web Server
Siemens RUGGEDCOM CROSSBOW Station Access Controller
Siemens SIMATIC S7-1500 TM MFP
Siemens Industrial Edge Devices
Siemens RUGGEDCOM APE1808 Devices
WAGO OS Linux
Hitachi Energy MicroSCADA X SYS600 Product
Hitachi Energy RTU500 Product
Hitachi Energy Asset Suite
We read the ICS Advisory Project database – an open, structured mirror of every CISA ICS-CERT advisory – and keep the vendors that matter to DACH industry.
Source: the ICS Advisory Project (github.com/icsadvprj, CC-licensed), which structures the advisories of the US agency CISA. CISA tracks globally; the advisories concern products used worldwide, including in Germany. No AI model, no keys.
All figures without guarantee. Data source: ICS Advisory Project (mirror of CISA ICS-CERT advisories, CC). The vendor selection is curated (industrial automation relevant to DACH) and not exhaustive. An advisory doesn't mean your plant is affected – check the respective original advisory. i6eal is not a security authority.
How many new security advisories (ICS-CERT) exist for the automation vendors common in German factories – with severity, a vendor ranking, a monthly trend and the latest reports.
From the ICS Advisory Project, an open structured database of all advisories from the US cybersecurity agency CISA (ICS-CERT). We filter to vendors relevant to DACH industry and refresh daily, as CISA publishes new advisories.
Not necessarily. An advisory describes a reported flaw in a product. Whether your specific plant is affected depends on version, configuration and patch level – the original vendor/CISA advisory clarifies that.
Large vendors with very broad, globally deployed portfolios (like Siemens) publish correspondingly more advisories. The absolute number is not a measure of “insecurity”.
Whether AI in production or connected OT: we bring new technology into operation securely.
These tools cover related ground.